[Git][security-tracker-team/security-tracker][master] new openvpn-auth-ldap issue

[Moritz Muehlenhoff (@jmm)]

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker


Commits:
67a97a91 by Moritz Muehlenhoff at 2024-06-28T13:50:08+02:00
new openvpn-auth-ldap issue

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -247,7 +247,10 @@ CVE-2024-31802 (DESIGNA ABACUS v.18 and before allows an attacker to bypass the
 CVE-2024-2882 (SDG Technologies PnPSCADA allows a remote attacker to attach various e ...)
 	NOT-FOR-US: SDG Technologies PnPSCADA
 CVE-2024-28820 (Buffer overflow in the extract_openvpn_cr function in openvpn-cr.c in  ...)
-	TODO: check
+	- openvpn-auth-ldap <unfixed>
+	[bookworm] - openvpn-auth-ldap <no-dsa> (Minor issue)
+	[bullseye] - openvpn-auth-ldap <no-dsa> (Minor issue)
+	NOTE: https://github.com/threerings/openvpn-auth-ldap/pull/92
 CVE-2024-24792 (Parsing a corrupt or malicious image with invalid color indices can ca ...)
 	TODO: check
 CVE-2024-1153 (Improper Access Control vulnerability in Talya Informatics Travel APPS ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/67a97a912539d1d475c1f83d01a193dd25ec164a

-- 
This project does not include diff previews in email notifications.
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/67a97a912539d1d475c1f83d01a193dd25ec164a
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20240628/95e306d4/attachment-0001.htm>